Http v2 api

56 views
Skip to first unread message

Ashutosh Kumar Pandey

unread,
Dec 1, 2023, 1:22:58 AM12/1/23
to quay-sig
Ques : Is there any api which will genrate an universal access-token/bearer-token  for all the repos inside project quay (public/private) ?

Things i have tested till now 
1) https://quay.io/v2/auth?service=quay.io to genrate token by using basic auth in the header 2) After getting that token when i trying to using it as a bearer token for v2/_catalog token then i am able to pull all the repos from trivy . 3) But the problem comes when i am trying to list all the images from a private repo with the same bearer token . then i am getting
{
"errors": [
{
"code": "UNAUTHORIZED",
"detail": {},
"message": "access to the requested resource is not authorized"
}
] 4) Is there a way to genrate any universal token which can list all the images wheather its public or private ?
}

Daniel Messer

unread,
Dec 1, 2023, 5:00:28 AM12/1/23
to Ashutosh Kumar Pandey, quay-sig
Hi,

By default, users can only access repositories in organizations they are members of. There is a configuration directive called GLOBAL_READONLY_SUPER_USERS which is a list of user names that get read access to all the content in the registry. If you add your user to this list they should be able to leverage their bearer token with any organization or repository in the system using the v2 registry API.

Best,
Daniel

--
You received this message because you are subscribed to the Google Groups "quay-sig" group.
To unsubscribe from this group and stop receiving emails from it, send an email to quay-sig+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/quay-sig/8f74052f-f8f1-4c25-a279-2045a250644bn%40googlegroups.com.


--
Daniel Messer

Product Management

Red Hat OpenShift

Reply all
Reply to author
Forward
0 new messages